QASecClaw: A Multi-Agent LLM Approach for False Positive Reduction in Static Application Security Testing

Mohd Ruhul Ameen, Md Takrim Ul Alam, Akif Islam

Abstract

Static Application Security Testing tools help developers find security vulnerabilities before release, but they often produce many false positives. This increases manual review effort, reduces developer trust, and may cause real vulnerabilities to be ignored among noisy reports. We present QASecClaw, a multi agent approach that combines conventional Static Application Security Testing with coding specialized Large Language Model based contextual code review. A SAST engine first reports candidat

Categories

Cite This Resource

@article{llmsec202600087,
  title = {QASecClaw: A Multi-Agent LLM Approach for False Positive Reduction in Static Application Security Testing},
  author = {Mohd Ruhul Ameen and Md Takrim Ul Alam and Akif Islam},
  year = {2026},
  url = {https://arxiv.org/abs/2605.01885},
}